5653 Commits (8481c5adb7b713bb521028f349d8596b73df37e2)

 

All Branches   

Search

Author	SHA1	Message	Date
Rene Krenn	8481c5adb7	MT#64761 prov templates: support contract-only mode ... provisioning templates basically work on subscriber level. this change introduces support for processing files with contract data only. Change-Id: I2f75aaf01e70b1348549c957ab68faf0d786bca9	1 month ago
Rene Krenn	47b5cc7b7b	MT#64594 prov templates: fraud preferences support ... this change introduces support to set contract fraud preferences via provisioning template, ie: fraud_preferences: fraud_interval_limit: "function { current_fraud_interval_source == 'profile' ? current_fraud_interval_limit : 10000; }" fraud_interval_lock: "function { current_fraud_interval_source == 'profile' ? current_fraud_interval_lock : 2; }" fraud_interval_notify: "function { current_fraud_interval_source == 'profile' ? current_fraud_interval_notify : 'jdoe@sipwise.com'; }" fraud_daily_limit: 500 fraud_daily_lock: 2 fraud_daily_notify: "jdoe@sipwise.com" Change-Id: Id7e67fd71e0b1d291ee5e2ea9e2ea9b6bae64781	2 months ago
Rene Krenn	9752c6c290	MT#63401 jquery upgrade: restore .attr( behaviour ... repeatable section selectors fail to recognize the selected ceckbox, because .attr() is used, but newer jquery would need .prop(). the compat layer is extended to restore .attr() behaviour. Change-Id: I2dc23cb4dd120080cd6d9aa9d3902ed7285c977b	2 months ago
Rene Krenn	03fec29b38	MT#64584 prov templates: contract_balance support ... this change introduces support to set balances via provisioning template, ie: contract_balance: cash_balance_code: function ( return 123; } free_time_balance: 456 Change-Id: I85d444b26c8f4d50ace39518f7c33c292b4afa0b	2 months ago
Guillem Jover	5e174ba25d	MT#64527 ngcp-panel-create-keys: Add missing import ... We need to import Fcntl for O_WRONLY. Fixes: commit fb44ee879a Change-Id: I3458e1ece61c230072d9f8e325cab5adc8cf07fb	2 months ago
Rene Krenn	36dfb7c4de	MT#63401 upgrade to jquery 3.6.4 and jquery-ui 1.13.2 ... The identified library jquery, version 1.7.2 is vulnerable. CVE-2020-11023 CVE-2020-11022 CVE-2015-9251 CVE-2019-11358 CVE-2020-7656 CVE-2012-6708 The identified library jquery-ui, version 1.10.3 is vulnerable. CVE-2021-41184 CVE-2021-41183 CVE-2021-41182 CVE-2022-31160 Change-Id: I46488ec6bdace38672da92ab08ba2687890bbd58	2 months ago
Guillem Jover	fb44ee879a	MT#64527 ngcp-panel-create-keys: Fix race condition when creating TLS certs ... We should not create and populate the TLS keys and certificate files with the default permissions from open(), to then fix that up in a later call. Instead use the specified permissions (even if they might get restricted further by the current umask), and then we will possibly open them up again when doing the chmod(). Spotted-by: Michael Prokop <mprokop@sipwise.com> Change-Id: I810e041cc4038bdaed8a3335ca45009129c928de	2 months ago
Guillem Jover	5190438b95	MT#64527 ngcp-panel-create-keys: Increase the default RSA key size to 3072 ... The BSI recommends a minimum key size of 3000 bits, which for RSA maps to 3072 bits. Ref: https://www.keylength.com/en/8/ Change-Id: I07c53a9c55d8f6472e69f80e7c1e0725e8b1491c	2 months ago
Guillem Jover	d48ff17aac	MT#64527 ngcp-panel-create-keys: Do not allow RSA keys sizes below 2048 bits ... This is the minimum accepted by NIST for example. Spotted-by: Michael Prokop <mprokop@sipwise.com> Change-Id: I69032f6a13493a7d042b81e205a6e446c186f7cd	2 months ago
Guillem Jover	43f176de69	MT#64527 ngcp-panel-create-keys: Fix TLS keys/certs files and dirs permissions ... We must not create this directory, which does not have the sticky bit set, with world writable permissions, even more so when we are storing TLS certificates and keys in it. We should not create the TLS (public) certificate with 600 permissions, 644 is more appropriate. Change-Id: Icb8bf970f795d053444598c37a95a89aad3ae9ae	2 months ago
Rene Krenn	14caac386c	MT#62342 encode XMLRPC request body, decode XMLRPC response body ... prevent api 500 errors ie. from LibXML parsing because of invalid chars. Change-Id: I2630ba285e1da7bcbfe5558bad1b7c30fa86bebe	2 months ago
Kirill Solomko	81a4a2ff03	MT#64434 /api/platforminfo add multisite support ... * return multisite data if multi site is enabled, otherwise an empty hash. Change-Id: I46f4aa30fe7b31949cd471079d749d75d2f70f01	3 months ago
Sipwise Jenkins Builder	c5372820ee	TT#4166 I18N dump: snapshot 2026.02.10-23.20.18 ... Change-Id: Ic14fa0ae5d31ac634a79895b310e8aa0c43ab080	3 months ago
Guillem Jover	324279c850	MT#62763 Do not return undef, just return ... Rework return statements to be standalone instead of using high-precedence boolean operators. And just «return» which handles the call sites correctly depending on the context, instead of «return undef». Warned-by: perlcritic Fixes: Subroutines::ProhibitExplicitReturnUndef Change-Id: I05f9b6e26f0369448a6536ea2ef48b650ff56ad8	3 months ago
Kirill Solomko	12e8992a78	MT#64115 add peer multi site support ... * add peering server field 'site_id' that uses $c->config->{multisite} for a list of available sites, if multi site is enabled, otherwise the column is not visible via the UI but available regardless via the API Change-Id: I5e9ec64bcc80531022b6067b0c50b197ee25b952	3 months ago
Sipwise Jenkins Builder	bee84bc8af	Release new version 14.2.0.0+0~mr14.2.0.0	3 months ago
Guillem Jover	c7dac19c25	MT#62763 Fix pycodestyle issues ... - Add and update pycodestyle and black configuration files. - Fix missing explicit use of exceptions. - Fix missing blank lines around class and defs. Change-Id: I723c846a6cd756f996082be55ef2bf0c633fb42e	3 months ago
Michael Prokop	b864f27642	MT#62249 Refresh docker images ... We need the latest ngcp-archive-keyring version, addressing the SHA-1 situation with our repository key. To get that, we refreshed our base image sipwise-trixie, but need to ensure that we refresh all the docker images building on top of it. While at it, update the ENV syntax to avoid the deprecation warning. Change-Id: I110b87446c6f9d2696214a216e0023bf8e0244f8	3 months ago
Kirill Solomko	00b960814d	MT#64346 skip email dispatch without a dest email ... * when during email template sending invokation there is no target email, the process is correctly skipped. Change-Id: I810b258c9e623b75598fb5da9b98ff499a419c44	3 months ago
Kirill Solomko	224aec5fc8	MT#64232 improve check_subscriberadmin_write_access ... * subscriberadmin can now edit own data in scenarios where it's a SIP customer subscriber * add a check to that the edited subscriber belongs to the same customer Change-Id: I69a84c481be413ac5604c74856e760eee648b637	3 months ago
Kirill Solomko	c417cc622d	MT#64295 better handling of via_route empty string ... * transform via_route empty string into undef and store it as undef without validating it against SIP-URI Change-Id: Iefae7b26910201183ae3d049b3785a68dc81ce64	3 months ago
Kirill Solomko	a97490e97d	MT#64297 /api/platforminfo expose sip.external_sbc config ... * sip.external_sbc options are exposed to authenticated admin users in /api/platforminfo Change-Id: Ifea5eb43b8638299d1ef916c65a17fa18f833f82	3 months ago
Kirill Solomko	638b2f20ae	MT#64295 fix /api/peeringservers via_route validation ... * NGCP::Form::Peering::Server rework via_route URI check from a comma separated list to a single value as well as improve value transformation and validation logic * /api/peeringservers add via_route value transformation as pre_proccess_form_resource() Change-Id: I742a40534a4861dd30e0ccbc6684c02d2386f642	3 months ago
Kirill Solomko	c48355ca03	MT#64282 replace redirect with ajax_logout separation ... * a better way is to leave /logout as is and instead separate ajax_logout so that it's not chained from /logout anymore, resulting in 200 OK with empty application/json response, and without redirects by default Change-Id: Ide4f3845532e176e6866ebe61155e04d02aa3fbd	3 months ago
Kirill Solomko	4a1f5f4b28	MT#64282 add redirect=0 option to /ajax_logout ... * ajax_logout can now return 200 without further redirect when redirect=0 query param is provided Change-Id: I03f499e1090895c2fb382494dd4cc872427692f1	3 months ago
Kirill Solomko	41fb2d22cc	MT#64280 add ngcp_admin_ui_jwt realm and X-NGCP-Admin-UI header ... * ngcp_admin_ui_jwt is a copy of api_admin_jwt realm but with use_session: 1 * ngcp_admin_ui_jwt is used when X-NGCP-Admin-UI header is provided Change-Id: Ia82f97df922a69866f7c7d63ad1566ff0fc4bc2a	3 months ago
Rene Krenn	10df50468b	MT#64142 do not translate CF dropdown items ... names of CF destinationsets, sourcesets etc. are provided by the user and can therefore contain patterns that are then unintentionally interpreted by the perl Maketext Module, causing 500 errors as a consequence. translations are better disabled for the dropdown option items. Change-Id: I20fa5c5ad79f78f8d2f682ea54984e92997ec34c	4 months ago
Rene Krenn	5fb5a860c3	MT#63980 fix Javascript prov templates raising errors ... The JE module will populate $@, hence an enclosing eval{} wipes the error string unintentionally. in addition the "die" method is now exposed in Javascript templates, to use it to bail out, ie. to propagate a msg from an input validation to the UI. Change-Id: Id3fcf8a7820ee3df51e0cc6323350f5f5908fcf4	4 months ago
Kirill Solomko	acf142a993	MT#64172 admin_jwt restore use_session = 1 ... * sessions are used for admin_jwt realm because admin-ui iframed content relies on it as well as this realm is not related to API Change-Id: I6c0ee99301757c1479ce8148240b9583da144ea3	4 months ago
Guillem Jover	fb52d2deb4	MT#62899 Switch Dockerfile from Debian bookworm to trixie ... Change-Id: I44f4de37e272443ecbd12ec56ef68a6f0e592faf	4 months ago
Guillem Jover	d191420504	MT#62899 Update packaging for Debian trixie ... - Update copyright years. - Update Standards-Version to 4.7.2. - Remove «Rules-Requires-Root: no» field, which is now the default. - Remove «Priority: optional» field, which is now the default. - Remove ancient conffile removal handling. - Remove dh-make boilerplate comments from maintainer script. - Wrap and sort fields. - Add spaces around operators in make variables. Change-Id: I5c91d7e76fa31d3fa07c0215f08b86274850adfb	4 months ago
Kirill Solomko	6003c3bab4	MT#64172 enable use_session = 0 for all API and JWT realms ... * this disables $c->user_exists to result in successful auth if correct session is provided. Change-Id: Id91b88f6f30dcca6a7b40eb61a23e2bbdabce7dd	4 months ago
Sipwise Jenkins Builder	73e945c52d	TT#4166 I18N dump: snapshot 2025.12.17-23.19.49 ... Change-Id: Id28a05f2a4874ec019a8e3a0e3d94301a3597e80	4 months ago
Guillem Jover	b6e2baa6c7	MT#63479 Remove prosody support ... Change-Id: I9d3e268450396c12e4058ac9394a80bb191d7635	5 months ago
Kirill Solomko	f6246ba094	MT#64131 fix non-default NULL preference render ... * non-default NULL value is now correctly selected in the UI preferences list as well as in the edit form. Change-Id: Ief3b2e6778441c736589cfccc5a5fb7e60a7dcf0	5 months ago
Kirill Solomko	9d70f62f70	MT#64121 fix $c->error $c->error handling ... * errors coming from Utils::Preferences can have only 1 element in $c->error, the case is now correctly handled. Change-Id: I9f5d384da8b5cb50b78636309dbaab5efa9bdee2	5 months ago
Kirill Solomko	56b15e8197	MT#64067 fix subscriberpreferences PUT update_item ... * PUT update_item is fixed to properly expect 3 values Change-Id: Id63445f76ffbc312aadafc7b502fffd070eb0089	5 months ago
Kirill Solomko	bb6b737c26	MT#64098 enable logger autoflush ... * Preamble: disabled autoflush caused logs to be written only when a request is finished, and what is worse, all of them with exact same time. As logging $c->log->* happens via syslog and rsyslog already uses buffering for that, there is no reason to cause such additional buffering by the Perl logger (which is Log4perl in this case). On top of it, it's already the default option for Log4Perl and was only inactive in the Panel app. * enable autoflush during Log4Perl init in the Panel app. Change-Id: I7cdcf7de30489d84fd8a9af88cb40669113ddbc1	5 months ago
Kirill Solomko	eae620f204	MT#64067 address deadlock detection for preferences ... * improve Role/API/Preferences err_code callback to check deadlocks (via $self->check_deadlock) and set $process_extras->{retry_tx} = 1 so that the outer caller can act upon it and restart the transaction. * increase deadlock attempts from 2 to 5 as some deadlocks seem to take longer time to resolve. * wait 1 second between deadlock retry attempts as otherwise if a deadlock takes more than 1 second and all the retries are done within less than a second it will cause an error. * EntitiesItem: add support for retry_tx and call goto TX_START if $process_extras->{retry_tx} (when check_deadlock is processed externally, like in Utils::Preferences::update_item in the err_code callback). Change-Id: Ib56383710041c21d72782047a852353296c22215	5 months ago
Rene Krenn	4905f124bf	MT#63818 ldap auth: support dn lookup ... this change will allow to transform the NGCP admin login name to a ldap dn by searching the directory. this is the same technique sssd also uses. Change-Id: Ic852cb0e27aaf31177f2ccf692507b12d2fce3a5	5 months ago
Kirill Solomko	6e2ca03a6e	MT#63997 make underrun lock on requests optional ... * a new ngcp_panel option $c->config->{api}{underrun_lock_on_request} is in place and if disabled - the underrun lock logic on GET contracts,customers,subscribers,subscriberpreferences, and POST subscribers is skipped. Change-Id: I5ea337ce42b3c979fe55b3df3516a19548b64f90	5 months ago
Sipwise Jenkins Builder	31d07419f2	Release new version 14.1.0.0+0~mr14.1.0.0	5 months ago
Sipwise Jenkins Builder	6c57a87806	TT#4166 I18N dump: snapshot 2025.11.13-23.23.57 ... Change-Id: Ice7ae1845b6ba1da7795b9b09b9daf8cfbe98c85	6 months ago
Kirill Solomko	d0783b1856	MT#63859 add expand by carrier_id ... * /api/lnpnumbers can now expand by carrier_id Change-Id: Ia484041c413a240800c1610f0bc92c141bded14d	6 months ago
Kirill Solomko	be0e9de01b	MT#63839 add expand by subscriber_email_template_id ... * subscriber_email_template_id can now be globally expanded Change-Id: Ifad15d328ed6cfb81670974a8a4a2f9ad6196652	6 months ago
Rene Krenn	f501fc1dcf	MT#63706 skip_locked for POST /api/subscriber/ ... add the SELECT .. SKIP LOCK mechanism for POST /api/subscriber/, to reduce lock wait timeouts when creating suscribers for the same customer in parallel. Change-Id: I067102b3dc726e5d12fa859613b548d007ce29ee	6 months ago
Marco Capetta	4f64c07ac5	MT#63893 Fix typo in commit 3b17ab6c54 ... Change-Id: Ieaa0f18cfab821a2c85de1a3602946c1855c8dba	6 months ago
Marco Capetta	3b17ab6c54	MT#63893 Call 'sip_dispatcher_reload' while changing peerings via API ... For scenarios when: * a peering server is enabled or disabled * a peering probe is enabled or disabled * a peering group with active peering servers or peering probes is removed a "sip_dispatcher_reload" XMLRPC request is sent to kamalilio-proxy, otherwise the dispatcher cache is not reflected and therefore, not available with the actual state until next kamailio-proxy restart. Change-Id: If3a98115224eb132126d5a53df7320cb6a33deba	6 months ago
Sipwise Jenkins Builder	ef8b9ffc18	TT#4166 I18N dump: snapshot 2025.11.07-23.19.31 ... Change-Id: I04d65a04c5b8d6c3732fea1e01299a043ed1f30f	6 months ago
Rene Krenn	3ff0395cac	MT#61442 allow utf8 for creating data::hal links ... prevent api 500 error when building urls in data::hal from item data tha carry odd utf8 fields (ie. usernames of banned users) Change-Id: I0c2c0bf0170bf97bf8a05c35fdb343860b6aeef4	6 months ago